3 ms·
Thought Leader & Ron Ross. Big Nope. I think one of my actually business oriented colleagues put it best, "I've read through 20,000 pages of NIST security mat
by OrvalWintermute 5y ago
Thought Leader & Ron Ross.
Big Nope.
I think one of my actually business oriented colleagues put it best, "I've read through 20,000 pages of NIST security material, and there is no sense of business prioritization, or cogent strategy between all of it."
Truth be told, some of this came out much later. As in, 5 - 7 years later. In the interim a huge amount of abstract security controls that significantly lag actual defensive industry, and the paper A&A / NIST 800-37 process.
Read about two sections that I thought were relevant, the rest was fluff.
LI is not normally a place for security thought leadership.
- deleted 5y ago[deleted]
- dogman144 5y agoRon puts out decent views on system security in his smaller formats, and pretty interestingly - if you have his cell phone, you can call and he’ll chat for advice. Given the central points he sits on for his work, that level of access is at a minimum a great way to get some Intel into “govt’s” view on this world. This increasingly matters as they step into the blue team fray vs FEYE leading it. More importantly, security world needs more of that open door policy from senior leaders.